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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .1 7(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
September 23, 2008 has been entered. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 10, 12, 15-18, 32, 36, 37, and 58 are rejected under 35 U.S.C. 101 
because the claimed invention is directed to non-statutory subject matter. The claimed 
information processing apparatus of claims 10, 12, 15-18, 36, 37, and 58 and the 
information processing system of claim 32 are software per se. Please refer to MPEP 
2106. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 1 03(c) and potential 35 U.S.C. 1 02(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

Claims 1 , 3, 6, 1 0, 1 2, 1 5, 1 9, 21 , 24, 31 -34, 36-41 , and 57-59 are rejected under 
35 U.S.C. 103(a) as being unpatentable over Hunnicutt et al (US Patent #5,889,952) in 
view of Hipp (US Patent #6,848,106) in view of Klots et al (US Patent #6,920,475) in 
view of Phillips et al (US Patent #7,136,903). 

Claims 1,10, and 19 disclose an information processing method, apparatus, and 
storage medium of controlling access to computer resources managed by an operating 
system in a computer, the method, apparatus, and storage medium being implemented 
by a specific resource management program located between the operating system and 
an application, comprising: a storing step of storing a management table in a storage 
medium, wherein the management table provides, for each computer resource 
managed by the operating system, access right information representing access rights 
for outputting each computer resource to another computer resource, and conditions 
under which the access right is validated; an interception step of intercepting an 
operation request for a first computer resource from a process, before the operation 
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request is transferred to the operating system, and if the process holds the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource; a determination step of: monitoring a series of operation 
requests associated with the registered process and the registered computer resource 
to recognize when the series of operation requests, considered together, has the effect 
of outputting the registered computer resource to a second computer resource, 
retrieving from the management table first access right information of the registered 
computer resource and second access right information of the second computer 
resource and, determining whether the registered process has an access right for 
outputting the registered computer resource to the second computer resource by 
checking the first access right information and the second access right information 
retrieved from the management table; a processing step of, if it is determined in the 
determination step that the registered process has the access right of both the first and 
the second access right information, transferring the operation request to the operating 
system and returning a result from the operating system to the registered process; and 
a denial step of denying the operation request, if it is determined in the determination 
step that the registered process lacks either the access right of the first access right 
information of the access right of the second access right information. Hunnicutt et al 
teaches an access control list, which can be associated to a single file, or a list of files, 
which contains information on which users have access and what types of rights are 
allowed to the specific user (column 4, lines 44-49, column 5, lines 15-19, figure 3), an 
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access cache which keeps track of access to resources (column 5, lines 27-37), 
retrieving access information from a table (column 1, lines 54-59), a check system 
which compares the access rights based on the information retrieved (column 1, lines 
54-59 column 5, lines 54-67), and since the request has access to the resource the 
resource is outputted (column 5, lines 54-67), if a matching access permission exists 
then access to the file is granted (column 5, lines 58-61), and if no permission is granted 
an error message is generated to the user denying access (figure 5). It fails to teach 
intercepting an operation request for a first computer resource from a process, before 
the operation request is transferred to the operating system, and if the process holds 
the first computer resource, registering a correspondence between the process and the 
first computer resource in a storage medium resulting in a registered process and a 
registered computer resource and monitoring a series of operation requests associated 
with the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Hipp teaches the 
interception program is between the operating system and the application (Figure 3, 
column 3, line 59 - column 4, line 21 ). 

Hunnicutt et al and Hipp are analogous art because they are both related to 
controlling access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Hipp with the system in Hunnicutt et al 
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because costly overhead is prevented and performance is improved (Hipp, column 1, 
lines 52-63). 

Hunnicutt et al in view of Hipp teaches the limitations as recited above. It fails to 
teach if the process holds the first computer resource, registering a correspondence 
between the process and the first computer resource in a storage medium resulting in a 
registered process and a registered computer resource and monitoring a series of 
operation requests associated with the registered process and the registered computer 
resource to recognize when the series of operation requests, considered together, has 
the effect of outputting the registered computer resource to a second computer 
resource. Klots et al teaches a director keeps track of which resource is handling a 
request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Hipp and Klots et al are analogous art because they are 
both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Hipp because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Hipp in view of Klots et al teaches the limitations as 
recited above. It fails to teach monitoring a series of operation requests associated with 
the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Phillips et al teaches 
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monitoring and determining if a request message is able to access a requested file, it is 
widely known in the art a request may be made in various ways (column 27, lines 39- 
57). 

Hunnicutt et al in view of Hipp in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Hipp in view of Klots et al because maintaining data integrity is provided 
(Phillips, column 5, lines 56-59). 

Claims 3 and 12 disclose the method and apparatus according to claim 1 , 
wherein the access right information designates an access right that is extended but not 
defined in an existing environment. Hunnicutt et al further teaches using access control 
lists for different levels of control on the server (column 5, lines 8-25). 

Claim 21 discloses the storage medium according to claim 19, wherein the 
determination step, includes determining whether the access right is present by looking 
up an access right management table containing resource designation information that 
designates a specific computer resource, condition information under which the access 
right is validated, and access right information that designates an access right that is 
extended but not defined in an existing environment. Hunnicutt et al further teaches an 
access control list, which can be associated to a single file, or a list of files. The list 
contains which users have access and what types of rights are allowed to the specific 
user (column 4, lines 44-49, column 5, lines 8-25, and figure 3). 
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Claims 6, 15, and 24 disclose the method, apparatus, and storage medium 
according to claims 3, 12, and 21, wherein the access right information contains 
information that designates at least one of a right to move to another medium, a right to 
copy to another medium, a right to print, a right to write to a shared memory, a right to 
capture a screen, and a right to restrict use processes. Hunnicutt et al further teaches 
an access control list, which each file object has associated with it. The list contains 
access control entries, which defines what type of access the user has, one option is full 
control, which allows manipulation in any way possible (column 4, lines 63-67). 

Claim 31 discloses the medium according to claim 19, wherein the computer 
resource includes contents of a Web cast, digital broadcasting, and music distribution. 
Hunnicutt et al further teaches the resources being on a file level which means each file 
object stored on a server (column 4, lines 44-49, 56-57). 

Claims 32, 33, and 34 disclose a system, control method, and storage medium 
for an information processing system constituted by connecting first and second 
terminals through a communication network the first and the second terminals being 
controlled by a specific resource management program located between and operating 
system and an application for each terminal, comprising: a storing step of storing a 
management table in a storage medium, wherein the management table provides, for 
each computer resource managed by an operating system of the second terminal, 
access right information representing access rights for outputting each computer 
resource to another computer resource, and conditions under which the access right is 
validated; an interception step of intercepting, an operation request for a first computer 
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resource of the second terminal from a process in the first terminal, before the computer 
resource of the second terminal is accessed via an operating system of the first 
terminal, and if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource; a 
determination step of: monitoring a series of operation requests associated with the 
registered process and the registered computer resource to recognize when the series 
of operation requests, considered together, has the effect of outputting the registered 
computer resource to a second computer resource, retrieving from the management 
table first access right information of the registered computer resource and second 
access right information of the second computer resource, and determining whether the 
registered process has an access right for outputting the registered computer resource 
to the second computer resource by checking the first access right information and the 
second access right information retrieved from the management table; a processing 
step of, if it is determined in the determination step that the registered process has the 
access right of both the first and the second access right information, transferring the 
operation request to the operating system in the first terminal and returning a result from 
the operating system to the registered process in the first terminal; and a denial step of 
denying the operation request if it is determined in the determination step that the 
registered process lacks either the access right of the first access right information or 
the access right of the second access right information. Hunnicutt et al teaches an 
access control list, which can be associated to a single file, or a list of files, which 
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contains information on which users have access and what types of rights are allowed 
to the specific user (column 4, lines 44-49, column 5, lines 15-19, figure 3), an access 
cache which keeps track of access to resources (column 5, lines 27-37), retrieving 
access information from a table (column 1 , lines 54-59), a check system which 
compares the access rights based on the information retrieved (column 1, lines 54-59 
column 5, lines 54-67), and since the request has access to the resource the resource 
is outputted (column 5, lines 54-67), if a matching access permission exists then access 
to the file is granted (column 5, lines 58-61), and if no permission is granted an error 
message is generated to the user denying access (figure 5). It fails to teach 
intercepting an operation request for a first computer resource of the second terminal 
from a process in the first terminal, before the computer resource of the second terminal 
is accessed via an operating system of the first terminal, and if the process holds the 
first computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource and monitoring a series of operation requests associated 
with the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Hipp teaches the 
interception program is between the operating system and the application (Figure 3, 
column 3, line 59 - column 4, line 21 ). 

Hunnicutt et al and Hipp are analogous art because they are both related to 
controlling access to computer resources. 
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At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Hipp with the system in Hunnicutt et al 
because costly overhead is prevented and performance is improved (Hipp, column 1, 
lines 52-63). 

Hunnicutt et al in view of Hipp teaches the limitations as recited above. It fails to 
teach if the process holds the first computer resource, registering a correspondence 
between the process and the first computer resource in a storage medium resulting in a 
registered process and a registered computer resource and monitoring a series of 
operation requests associated with the registered process and the registered computer 
resource to recognize when the series of operation requests, considered together, has 
the effect of outputting the registered computer resource to a second computer 
resource. Klots et al teaches a director keeps track of which resource is handling a 
request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Hipp and Klots et al are analogous art because they are 
both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Hipp because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Hipp in view of Klots et al teaches the limitations as 
recited above. It fails to teach monitoring a series of operation requests associated with 
the registered process and the registered computer resource to recognize when the 
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series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Phillips et al teaches 
monitoring and determining if a request message is able to access a requested file, it is 
widely known in the art a request may be made in various ways (column 27, lines 39- 
57). 

Hunnicutt et al in view of Hipp in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Hipp in view of Klots et al because maintaining data integrity is provided 
(Phillips, column 5, lines 56-59). 

Claims 36, 38, and 40 disclose an apparatus, method, and storage medium 
connected to a terminal through a communication network, the information processing 
apparatus and the terminal being controlled by a specific resource management 
program located between an operating system and an application for each of the 
information processing apparatus and the terminal, comprising: an interception step of 
intercepting, an operation request for a first computer resource of the terminal from a 
process, before the computer resource of the terminal is accessed via an operating 
system of the information processing apparatus, and if the process holds the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource, and a transmitting step of transmitting the operation 
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request intercepted in the interception step to the terminal; a receiving step of receiving 
a reply to the operation request from the terminal, wherein the terminal: monitors a 
series of operation requests associated with the registered process and the registered 
computer resource to recognize when the series of operation requests, considered 
together, has the effect of outputting the registered computer resource of the terminal to 
a second computer resource, retrieves from a management table first access right 
information of the registered computer resource and second access right information of 
the second computer resource, and determines whether the registered process has an 
access right for outputting the registered computer resource to the second computer 
resource by checking the first access right information and the second access right 
information retrieved from the management table, wherein the management table 
provides, for each computer resource managed by the operating system of the terminal, 
access right information representing access rights for outputting each computer 
resource to another computer resource, and conditions under which the access right is 
validated, wherein in the receiving step a determination result determined by the 
terminal is received as the reply. Hunnicutt et al teaches the server communicating with 
other servers and clients using a standard communications protocol (column 3, lines 37- 
39, figure 1), an access control list, which can be associated to a single file, or a list of 
files, which contains information on which users have access and what types of rights 
are allowed to the specific user (column 4, lines 44-49, column 5, lines 15-19, figure 3), 
an access cache which keeps track of access to resources (column 5, lines 27-37), 
retrieving access information from a table (column 1, lines 54-59), a check system 
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which compares the access rights based on the information retrieved (column 1, lines 
54-59 column 5, lines 54-67), and since the request has access to the resource the 
resource is outputted (column 5, lines 54-67), if a matching access permission exists 
then access to the file is granted (column 5, lines 58-61), and if no permission is granted 
an error message is generated to the user denying access (figure 5). It fails to teach 
intercepting an operation request for a first computer resource of the terminal from a 
process, before the computer resource of the terminal is accessed via an operating 
system of the information processing apparatus, and if the process holds the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource and monitoring a series of operation requests associated 
with the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Hipp teaches the 
interception program is between the operating system and the application (Figure 3, 
column 3, line 59 - column 4, line 21 ). 

Hunnicutt et al and Hipp are analogous art because they are both related to 
controlling access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Hipp with the system in Hunnicutt et al 
because costly overhead is prevented and performance is improved (Hipp, column 1, 
lines 52-63). 
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Hunnicutt et al in view of Hipp teaches the limitations as recited above. It fails to 
teach if the process holds the first computer resource, registering a correspondence 
between the process and the first computer resource in a storage medium resulting in a 
registered process and a registered computer resource and monitoring a series of 
operation requests associated with the registered process and the registered computer 
resource to recognize when the series of operation requests, considered together, has 
the effect of outputting the registered computer resource to a second computer 
resource. Klots et al teaches a director keeps track of which resource is handling a 
request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Hipp and Klots et al are analogous art because they are 
both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Hipp because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Hipp in view of Klots et al teaches the limitations as 
recited above. It fails to teach monitoring a series of operation requests associated with 
the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Phillips et al teaches 
monitoring and determining if a request message is able to access a requested file, it is 
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widely known in the art a request may be made in various ways (column 27, lines 39- 
57). 

Hunnicutt et al in view of Hipp in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Hipp in view of Klots et al because maintaining data integrity is provided 
(Phillips, column 5, lines 56-59). 

Claims 37, 39, and 41 disclose an apparatus, method, and storage medium 
connected to a terminal through a communication network, the information processing 
apparatus and the terminal being controlled by a specific resource management 
program located between an operating system and an application for each of the 
information processing apparatus and the terminal, comprising: a storing step of storing 
a management table in a storage medium, wherein the management table provides, for 
each computer resource managed by an operating system of the information processing 
apparatus, access right information representing access rights for outputting each 
computer resource to another computer resource, and conditions under which the 
access right is validated; a receiving step of receiving an operation request for a first 
computer resource of the information processing apparatus from a process of the 
terminal, intercepted by the terminal, before the computer resource of the information 
processing apparatus is accessed via an operating system of the information 
processing apparatus, and if the process holds the first computer resource, registering a 
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correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource; a 
determination step of: monitoring a series of operation requests associated with the 
registered process and the registered computer resource to recognize when the series 
of operation requests, considered together has the effect of outputting the registered 
computer resource to a second computer resource, retrieving from the management 
table first access right information of the registered computer resource and second 
access right information of the second computer resource, and determining whether the 
registered process has an access right for outputting the registered computer resource 
to the second computer resource by checking the first access right information and the 
second access right information retrieved from the management table; a processing 
step of, if it is determined in the determination step that the registered process has the 
access right of both the first and the second access right information, transferring the 
operation request to the operating system in the terminal and returning a result to a 
process in the terminal; and a denial step of denying the operation request if it is 
determined in the determination step that the registered process lacks either the access 
right of the first access right information or the access right of the second access right 
information. Hunnicutt et al teaches a server communicating with other servers and 
clients using a standard communications protocol (column 3, lines 37-39, figure 1), an 
access control list, which can be associated to a single file, or a list of files, which 
contains information on which users have access and what types of rights are allowed 
to the specific user (column 4, lines 44-49, column 5, lines 15-19, figure 3), an access 
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cache which keeps track of access to resources (column 5, lines 27-37), retrieving 
access information from a table (column 1 , lines 54-59), a check system which 
compares the access rights based on the information retrieved (column 1, lines 54-59 
column 5, lines 54-67), and since the request has access to the resource the resource 
is outputted (column 5, lines 54-67), if a matching access permission exists then access 
to the file is granted (column 5, lines 58-61), and if no permission is granted an error 
message is generated to the user denying access (figure 5). It fails to teach receiving 
an operation request for a first computer resource of the information processing 
apparatus from a process of the terminal, intercepted by the terminal, before the 
computer resource of the information processing apparatus is accessed via an 
operating system of the information processing apparatus, and if the process hold the 
first computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource and monitoring a series of operation requests associated 
with the registered process and the registered computer resource to recognize when the 
series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Hipp teaches the 
interception program is between the operating system and the application (Figure 3, 
column 3, line 59 - column 4, line 21 ). 

Hunnicutt et al and Hipp are analogous art because they are both related to 
controlling access to computer resources. 
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At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Hipp with the system in Hunnicutt et al 
because costly overhead is prevented and performance is improved (Hipp, column 1, 
lines 52-63). 

Hunnicutt et al in view of Hipp teaches the limitations as recited above. It fails to 
teach if the process holds the first computer resource, registering a correspondence 
between the process and the first computer resource in a storage medium resulting in a 
registered process and a registered computer resource and monitoring a series of 
operation requests associated with the registered process and the registered computer 
resource to recognize when the series of operation requests, considered together, has 
the effect of outputting the registered computer resource to a second computer 
resource. Klots et al teaches a director keeps track of which resource is handling a 
request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Hipp and Klots et al are analogous art because they are 
both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Hipp because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Hipp in view of Klots et al teaches the limitations as 
recited above. It fails to teach monitoring a series of operation requests associated with 
the registered process and the registered computer resource to recognize when the 
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series of operation requests, considered together, has the effect of outputting the 
registered computer resource to a second computer resource. Phillips et al teaches 
monitoring and determining if a request message is able to access a requested file, it is 
widely known in the art a request may be made in various ways (column 27, lines 39- 
57). 

Hunnicutt et al in view of Hipp in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Hipp in view of Klots et al because maintaining data integrity is provided 
(Phillips, column 5, lines 56-59). 

Claims 57, 58, and 59 disclose the method, apparatus, and medium according to 
claims 1,10, and 19 wherein the interception step further comprises intercepting an 
operation request from the operating system before access to a computer resource. 
Hipp further teaches intercepting a request from the operating system before access to 
a computer resource (Figure 3, column 3, line 59 - column 4, line 21 ). 

Claims 7-9, 16-18, and 25-27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hunnicutt et al (US Patent #5,889,952) in view of Hipp (US Patent 
#6,848,106) in view of Klots et al (US Patent #6,920,475) in view of Phillips et al (US 
Patent #7,1 36,903) as applied to claims 1,10, and 1 9 above, and further in view of 
Miller et al (US Patent #5,550,968). 
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Claims 7, 16, and 25 disclose the method, apparatus, and storage medium 
according to claims 1,10, and 19, wherein in the denial step, an access denial error 
message is returned to the process without any access to the requested computer 
resource. Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al 
teaches the limitations of claims 1,10, and 1 9, as recited above. It fails to teach 
returning a denial error message. Miller et al teaches informing the user of an incorrect 
password (column 9, lines 32-38, figure 5B). 

Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al and 
Miller et al are analogous art because they are both related to providing access control 
to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al because 
security is provided for individual controls within a window of an interface (Miller et al, 
column 2, lines 8-10). 

Claims 8, 17, and 26 disclose the method, apparatus, and storage medium 
according to claims 1,10, and 19, wherein in the denial step, a successful access 
message is returned to the request source process without any access to the requested 
computer resource. Hunnicutt et al in view of Hipp in view of Klots et al in view of 
Phillips et al teaches the limitations of claims 1,10, and 1 9 as recited above. It fails to 
teach returning a success message without access to the request resource. Miller et al 
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teaches returning a window, as a user would see if access was successful, but with the 
controls obscured when access is denied (column 9, lines 41-44). 

Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al and 
Miller et al are analogous art because they are both related to providing access control 
to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al because 
security is provided for individual controls within a window of an interface (Miller et al, 
column 2, lines 8-10). 

Claims 9, 18, and 27 disclose the method according to claims 1,10, and 19; 
wherein in the denial step, the operation request is converted into an operation request 
for a dummy computer resource and transferred to the operating system, and a result 
from the operating system is returned to the process. Hunnicutt et al in view of Hipp in 
view of Klots et al in view of Phillips et al teaches the limitations of claims 1,10, and 1 9, 
as recited above. It fails to teach converting the actual request into a request for a 
dummy resource and returning a result from the operating system. Miller et al teaches 
a system which returns to a step if the password entry subroutine is ended and displays 
the window as a user would see if the access was granted but with some fields 
obscured to the user (column 9, lines 41-44). 
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Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al and 
Miller et al are analogous art because they are both related to providing access control 
to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al because 
security is provided for individual controls within a window of an interface (Miller et al, 
column 2, lines 8-10). 

Claim 30 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hunnicutt et al (US Patent #5,889,952) in view of Hipp (US Patent #6,848,106) in view 
of Klots et al (US Patent #6,920,475) in view of Phillips et al (US Patent #7,136,903) as 
applied to claim 19 above, and further in view of New, JR. et al (US PGPUB 
#US2003/0028653). 

Claim 30 discloses the medium according to claim 19, wherein if it is determined 
in the determination step that no access right is present, and access is denied in the 
denial step, an access right is permitted by inputting charging information. Hunnicutt et 
al in view of Hipp in view of Klots et al in view of Phillips et al teaches the limitations of 
claim 28 as recited above. It fails to teach granting access rights by charging the 
requester. New JR. et al teaches billing the user if the requester has insufficient credit 
(figure 4). 
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Hunnicutt et al in view of Hipp in view of Klots et al in view of Phillips et al and 
New JR. et al are analogous art because they are both related to providing access to 
computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the traps in New JR. et al with the system in Hunnicutt et al in view 
of Hipp in view of Klots et al in view of Phillips et al because the system provides added 
security by preventing unauthorized copies of programs (New JR. et al, paragraph 33, 
lines 8-13). 

Response to Arguments 

Applicant's arguments filed October 22, 2008 have been fully considered but they 
are not persuasive. 

In response to applicant's argument that Hipp (US Patent #6,848,106) and 
Phillips et al (US Patent #7,136,903) are nonanalogous art, it has been held that a prior 
art reference must either be in the field of applicant's endeavor or, if not, then be 
reasonably pertinent to the particular problem with which the applicant was concerned, 
in order to be relied upon as a basis for rejection of the claimed invention. See In re 
Oetiker, 977 F.2d 1443, 24 USPQ2d 1443 (Fed. Cir. 1992). In this case, Hipp and 
Phillips et al are analogous art because they are both related to managing computer 
resources. 

Applicant asserts the prior art in particular Phillips et al does not teach or suggest 
the recited feature of determining whether a registered process has an access right for 
outputting the registered computer resource to a second computer resource by 
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checking first access right information and second access right information, and if it is 
determined that the registered process has access rights of both the first and second 
access right information, transferring the operation request to the operating system and 
returning a result from the operating system to the registered process. The Examiner 
respectfully disagrees, Hunnicutt et al teaches an access control list, which can be 
associated to a single file, or a list of files, which contains information on which users 
have access to the server and what types of rights are allowed to the specific user 
(column 4, lines 44-49, column 5, lines 15-19, figure 3), a check system which 
compares the access rights based on the information retrieved (column 1, lines 54-59 
column 5, lines 54-67), and since the request has access to the server and the resource 
the resource is outputted (column 5, lines 54-67), if a matching access permission 
exists then access to the file is granted (column 5, lines 58-61). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brian J. Gillis whose telephone number is (571 )272- 
7952. The examiner can normally be reached on M-F 7:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Rupal Dharia can be reached on 571-272-3880. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Brian J Gillis 
Examiner 
Art Unit 2441 

IB. J. Q.I 

Examiner, Art Unit 2441 
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/Larry D Donaghue/ 

Primary Examiner, Art Unit 2454 



